dc076be8b042f88f2dc7f9468372d373b159df2b8595879dc9a0a7d70b2d2a2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f253cb77c46f7ed50c3f9cefc6a04af
Size

61KB
Sample

231224-ynghhseefp
MD5

0f253cb77c46f7ed50c3f9cefc6a04af
SHA1

5b2c1c5e9f509e5cb89a0d922b7e2eb96fd54058
SHA256

dc076be8b042f88f2dc7f9468372d373b159df2b8595879dc9a0a7d70b2d2a2a
SHA512

3e185166d6fe60f6333c31dca9d71b087542512001bc474e0dbfac9ec32c56302fdedf9777828ee6b2f4b7d937487064026851dcb38a758a123097b68e9d80bb
SSDEEP

768:ig1eR9+KpvS3p2v3yrVKbKGVit4sgSSpwlXRJVSvsSQ+oPZIxyFNFzTami3pdWSG:U03p2/H1dSgw3fSaIxE3amiH1Di

Score

7^/10

Malware Config

Targets

- Target
  
  0f253cb77c46f7ed50c3f9cefc6a04af
- Size
  
  61KB
- MD5
  
  0f253cb77c46f7ed50c3f9cefc6a04af
- SHA1
  
  5b2c1c5e9f509e5cb89a0d922b7e2eb96fd54058
- SHA256
  
  dc076be8b042f88f2dc7f9468372d373b159df2b8595879dc9a0a7d70b2d2a2a
- SHA512
  
  3e185166d6fe60f6333c31dca9d71b087542512001bc474e0dbfac9ec32c56302fdedf9777828ee6b2f4b7d937487064026851dcb38a758a123097b68e9d80bb
- SSDEEP
  
  768:ig1eR9+KpvS3p2v3yrVKbKGVit4sgSSpwlXRJVSvsSQ+oPZIxyFNFzTami3pdWSG:U03p2/H1dSgw3fSaIxE3amiH1Di
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2